General
- Target 2026-08-05_490f1c1e3f5f9ba758dcd5802b09f165_coinminer_elex_frostygoop_hive_salatstealer_sliver
- Size 4.2MB
- Sample260805-dm86xscf36
- SHA256 c158dbd4ecf6d11b90741a4abb719c1c614cf2d7ebfb8461fd55aa72cd0a3eb1
- MD5 490f1c1e3f5f9ba758dcd5802b09f165
- SHA1 c7f8d7bafe30d60d0ef1fee4d0f05c0de22166c9
- SHA512 09b0531ab61193332771b5af3e05601db0ce28d7e20e272fce655d9d7678b245c11c5cd1e1d35a0a557a66012fe812f9644e9a4d953148e8b4588040a00a03b6
- SSDEEP 98304:/aPbb2hCTEmSLbDSkmKQOAPewvP6paAUmN:/rCTEmSLbDtmdOAPewvP6/
- TLSH T193160811BFCB44F6D5031A3160EBA36F233D69094F7DDB53EE4429A9EAB32951833249
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_490f1c1e3f5f9ba758dcd5802b09f165_coinminer_elex_frostygoop_hive_salatstealer_sliver.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_490f1c1e3f5f9ba758dcd5802b09f165_coinminer_elex_frostygoop_hive_salatstealer_sliver
- Size 4.2MB
- SHA256 c158dbd4ecf6d11b90741a4abb719c1c614cf2d7ebfb8461fd55aa72cd0a3eb1
- MD5 490f1c1e3f5f9ba758dcd5802b09f165
- SHA1 c7f8d7bafe30d60d0ef1fee4d0f05c0de22166c9
- SHA512 09b0531ab61193332771b5af3e05601db0ce28d7e20e272fce655d9d7678b245c11c5cd1e1d35a0a557a66012fe812f9644e9a4d953148e8b4588040a00a03b6
- SSDEEP 98304:/aPbb2hCTEmSLbDSkmKQOAPewvP6paAUmN:/rCTEmSLbDtmdOAPewvP6/
- TLSH T193160811BFCB44F6D5031A3160EBA36F233D69094F7DDB53EE4429A9EAB32951833249
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
3Credentials In Files
3